pam_p11 is a pluggable authentication module (PAM) package forusing cryptographic PKCS#11 tokens such as smart cards and USBcrypto tokens for local authentication.

pam_p11 uses libp11 to access any PKCS#11 module but it isprimarily developed for and tested with OpenSC PKCS#11.

pam_p11 implements two authentication modules:* pam_p11_openssh authenticates the user against public keys found in OpenSSH ~/.ssh/authorized_keys file.* pam_p11_opensc authenticates the user against certificates found in ~/.eid/authorized_certificates_. It is compatible with the older opensc "pamopensc" authentication module (eid mode).

pam_p11 is very simple, it has no config file, no options otherthan the PKCS#11 module file, does not know about certificatechains, certificate authorities, revocation lists or OCSP.Perfect for the small installation with no frills.

pam_p11 was written by an international team and is licensed asOpen Source software under the LGPL license.